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VZCZCEIA303LGY997 
PP RUCNFB 

DE RUHPSGG #210i> 0440UU 
ZMY SSSSS 
P 130110Z FE8 98 
FM USCINCPAC HONOLULU HI//J39// 

TO RUEKJCS/JOINT STAFF WASHINGTON DC//J39/0PS// 

INFO RUEKJCS/SECDEP WASHINGTON DC//AS0/C3I/DUSD(P)PS// 
RJCJAAA/USCINCSOC MACDlLL AFB FL//SOJ2/S0J3/S0Jb// 
RHCJAAA/USCINCTRANS CAT SCOTT AFB II//J2/J3/J6// 
RUC8ACM/CINCUSAC0M NORFOLK VA//J2/J3/J6// 
RJCUSTR/USCINCSTRAT OFFUTT AFB NE//J2/J3/J6// 
RJPEJNA/USCINCSPACE PETERSON AFB CO//SCJ2/SCJ3/SCJ6// 
RJFGNOA/USCINCEUR VAIHINGEN GE//ECJ2/ECJ3/ECJ6// 
RJCJACC/USCINCCENT MACDlLL AFB FL//CCJ2/CCJ3/CCJ6// 
RJMIAAA/USCINCSO MIAMI FL//J2/J3/J6// 

RHHMHAA/CINCPACFLT PEARL HARBOR HI//N<;/N3/N6// 
R’JHVPAC/HQ PACAF HICKAM AF8 HI //IN/OO/SC// 
RUHEHMS/COMMARFORPAC//G2/G3/G6// 

RUE AHIC/CDRUSARPAC FT SHAFTER HI//APOPS/APIAS// 
RHHJRAP/USARPAC INTEL FT SHAFTER HI//APIN// 


llffi 


: ‘i~ //•]" ly/si *' -£3l 

RJAGAAA/COMUS<OREA SEOUL K0R//FK-J2/F<-j3/FK-J6// 


RUALSFJ/COMUSJAPAN YOKOTA AB JA//J2/J3/J6// 
RUWMHGA/ALCOM ELMENDORF AF8 AK//J2/J3/J6// 
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PAGE 02 RUHPSGG2105-'*T' C C n C T flilL U/,,fGA»l 
RriHMUNS/CUMSOCPAC HONOLULU HI//S0J2/SUJ3/S0J6// 

RJETIAA/NSACS5 FT GEORGE G MEADE MD//NSOC/IS/S IP 0 /V 15 // 
RJCNF B/FBj W ASHINGTON DC//CITAC// 

RUEAIIA/CIA WASHINGTON DC//CTG/DI/OTI/IWT// 

RJEKDIA/DIA WASHINGTON DC//TWI/US/J2J/SY/DAJ2A// 
RUEJDCA/DISA WASHINGTON DC//D2/03/D6/GOSC// 
RUHDPAC/NCPAC HONOLULU HI //F4/F AOt>// 

rhhjjaa/jicpa: Honolulu hi//oiw/ds// 

RJHHAAA/DISA PAC WHEELEK AAF HI//PAC-ASSIST/PC6// 
RJHPSGG/AFWIC KELLY AFB TX//CC/EA/EAC/OSK/IR// 

RUDHIWA/DIRLIWA FT BELVOIR VA//ACERT/UR/DU// 

RJCBFAD/FLTIN = OWARCEN NORFOLK VA//N2/N3/Nb/SCI0/CIS0// 
RJLKGXA/NAVIN=OWARACT FJ GEORGE G MEADE MU//N3// 

RUOVKJW/JC2WC SAN ANTUNIO TX//DR/UV/OP/PD// 

RUETKEL/IUTC FT GEORGE G MEADfc MD//AAG// 

RJHPSAA/NCTAMS PAC HONOLULU HI//N3/N6// 

RHHMUNA/USCINCPAC HONOLULU HI//J2/J3/J39/J6// 

8T 

-s -c c n e t rzl ui(/oam 

MSGID/GENADMIN/J—39/PEB 96// 
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SJ9J/USCINCPA: SITREP 02 FOR UNJSUAl COMPuTtR INTKUSIUN 
ACTIVITY (U)// 

PJC/USCINCPAC INFORMATION OPERATIONS UlVISIUN/OSN 477-2S93// 

1. (U) USCINCPAC SITRfcP 02 IS A CUNsOlIUATED USPACOM RESPONSE. 

2. - Uj ' RCL U(/jAW> CURRENT SITUATION: wE HAVE DETECTED NO NEW COMPUTtR 
INTRUSIONS IN USPACOM OVER THfc PAST 29 HOURS. UPOATE TO UISA-PflC 
INTRUSIONS MENTIONED IN USCINCPAC SITREP #1: DISA-PAC HAS COMPLETEL 
A TOTAL REBUILD OF ONE OF THEIR AFFECTED DNS SERVERS, TWO OTHER DN5 
SERVERS REMAIN DOWN. DISA-PAC HAS ESTABLISHED EFFECTIVE WORK-AROJNCS 
TO MINIMIZE OPERATIONAL IMPACT. 

3. ^' gj'RCL UlMOlUn THE FOLLOWING I SSuES/UUESTIONS ARE FORWARDED FOR 
CONSIDERATION: 

A. - Mi«UCL U i ( i f QA ‘ 1 ) SHOULDl 

B. f Jj'UCL UK VC MU AT WHAT THRESHOLD SHOULD WE CONSIDER 
DISCONNECTING THE SIPRNET FROM THE NIPRNET? 

C. fJJ'flCL UKVGMU - AT WHAT THRESHOLD SHOULD WE CONSIDER THE NIPRNET 
AS COMPROMISED ? 

D. W I ICL UHi'OAN) AT WHAT THRESHOLD SHOULD WE BEGIN PHYSICALLY 
ISOLATING CRITICAL NETWORKS? 

E. T JjMtCL UKKGAH* - RECOMMEND OISA PUBLISH A WORLDWIDE IP HOT LIST F CR 


(b) (3) 10 USC § 130e, 18 USC § 798(a) 
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IP BLOCKING ACTION. 

F» " (Ui'ilCL UK/CAM) RECOMMEND OISA ORCHESTRATE A NATIONAL RESPONSE TC 
THE INTRUSION ACTIVITY. PERCEPTION IS THAT USAF, THROUGH AFIwC, HAS 
THE LEAD. AFI NC RFCOMM ENDATIONS ARE UNFORTUNATELY ONlY GOING TC US AF 
ADORESSEES , MAKING IT DIFFICULT FUR US TO ORCHESTRATE A THEATER-RID t 
RESPONSE. 

G. -fr ti/UCL tUU£MU UNDERSTAND USAF, THROUGH OSI, HAS LEAD 
INVESTIGATIVE RESPONSIBILITIES. RECOMMEND NON-USAF PENETRATIONS BE 
GIVEN EQUAL ATTENTION. 

4. "H ' S )<nCL U it /OAW) POINTS OF CUNTACTJ NORMAL DUTY HOURS, PUC IS 

477-2593, COMM (8u8) 477-2593. AFTER DUTY 
HOURS, CONTACT THE COO AT DSN 4/7-7227// 

CwBY: RADM MOBLEY, J-3? RtASON: 1.5(A)? DECLON: 8 FEB 08 
8T . 
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